// fltkernel.h
PEPROCESS FLTAPI FltGetRequestorProcess(
[in] PFLT_CALLBACK_DATA CallbackData
);
View the official Windows Driver Kit DDI referenceNo description available.
The FltGetRequestorProcess routine returns a process pointer for the thread that requested a given I/O operation.
CallbackData [in]Pointer to the callback data structure (FLT_CALLBACK_DATA) for the I/O operation.
FltGetRequestorProcess returns a process pointer for the thread that requested the I/O operation. If the operation is not associated with any thread, FltGetRequestorProcess returns NULL.
FltGetRequestorProcess returns a pointer to the process that the requesting thread is currently attached to. This process may or may not be the same process that created the thread.